Unscored DSA-2025-1 6 CVEs

icedove - several vulnerabilities

Published Mar 31, 2010 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 5.0	icedove	2.0.0.24-0lenny1

Vulnerabilities 6

Unscored —

CVE-2009-2404

Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as …

nss Debian

Aug 3, 2009
Unscored —

CVE-2009-2408

Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonke…

nss Debian

Jul 30, 2009
Unscored —

CVE-2009-2463

Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.…

nspr Debian

Jul 22, 2009
Unscored —

CVE-2009-3072

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thu…

Sep 10, 2009
Unscored —

CVE-2009-3075

Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, …

Sep 10, 2009
Unscored —

CVE-2010-0163

Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs …

Mar 22, 2010